Opentext vulnerabilities
220 vulnerabilities
Known vulnerabilities in Opentext products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 76 products.
Products
50 of 76- Brava\! Desktop36 vulnerabilities
- Imanager21 vulnerabilities
- Documentum Content Server8 vulnerabilities
- Vertica8 vulnerabilities
- Document Sciences Xpression7 vulnerabilities
- Opentext Extended Ecm7 vulnerabilities
- Edirectory6 vulnerabilities
- Flipper6 vulnerabilities
- Netiq Advance Authentication6 vulnerabilities
- Appbuilder5 vulnerabilities
- Arcsight Platform5 vulnerabilities
- Documentum Webtop5 vulnerabilities
- Opentext Application Automation Tools5 vulnerabilities
- Arcsight Enterprise Security Manager4 vulnerabilities
- Documentum Administrator4 vulnerabilities
- Documentum D24 vulnerabilities
- Exceed Ondemand4 vulnerabilities
- Access Manager3 vulnerabilities
- Arcsight Intelligence3 vulnerabilities
- Exceed Turbox3 vulnerabilities
- Filr3 vulnerabilities
- Livelink Ecm3 vulnerabilities
- Netiq Access Manager3 vulnerabilities
- Opentext Content Management3 vulnerabilities
- Opentext Directory Services3 vulnerabilities
- Privileged Access Manager3 vulnerabilities
- Secure Content Manager3 vulnerabilities
- Web Site Management Server3 vulnerabilities
- Advance Authentication2 vulnerabilities
- Advanced Authentication2 vulnerabilities
- Alm Octane2 vulnerabilities
- Arcsight Management Center2 vulnerabilities
- Brava\!2 vulnerabilities
- Content Server2 vulnerabilities
- Dimensions RM2 vulnerabilities
- Directory Services2 vulnerabilities
- Firstclass2 vulnerabilities
- Opentext Enterprise Security Manager2 vulnerabilities
- Operations Agent2 vulnerabilities
- Performance Center2 vulnerabilities
- PVCS Version Manager2 vulnerabilities
- Self Service Password Reset2 vulnerabilities
- Xm Fax2 vulnerabilities
- Archive Center Administration1 vulnerabilities
- Arcsight Logger1 vulnerabilities
- Asset Management X (Amx)1 vulnerabilities
- Bizmanager1 vulnerabilities
- Content Management1 vulnerabilities
- Cx E Voice1 vulnerabilities
- Endpoint Forensics & Response1 vulnerabilities
CVE-2026-75120opentextendpoint forensics & response+3
EPSS score0.41%
The OpenText™ (EnCase SAFE Agents) component utilized by OpenText™ Endpoint Investigator, OpenText™ Endpoint Forensics & Response, OpenText™ Information Assurance, and OpenText™ Endpoint Security contains a security vulnerability on the Agents that could allow unauthorized or unauthenticated activity that establishes an unauthorized connection to a vulnerable Agent by bypassing intended security controls during session establishmentCVE-2018-20165opentextopentext_portalEPSS score1.52%
Cross-site scripting (XSS) vulnerability in OpenText Portal 7.4.4 allows remote attackers to inject arbitrary web script or HTML via the vgnextoid parameter to a menuitem URI.CVE-2018-7660opentextdocumentum_d2EPSS score0.53%
In OpenText Documentum D2 Webtop v4.6.0030 build 059, a Reflected Cross-Site Scripting Vulnerability could potentially be exploited by malicious users to compromise the affected system via the servlet/Download _docbase or _username parameter.CVE-2018-7659opentextdocumentum_d2EPSS score0.53%
In OpenText Documentum D2 Webtop v4.6.0030 build 059, a Stored Cross-Site Scripting Vulnerability could potentially be exploited by malicious users to compromise the affected system via a filename of an uploaded image file.CVE-2013-6994opentextexceed_ondemandEPSS score1.18%
OpenText Exceed OnDemand (EoD) 8 transmits the session ID in cleartext, which allows remote attackers to perform session fixation attacks by sniffing the network.CVE-2013-6805opentextexceed_ondemandEPSS score0.71%
OpenText Exceed OnDemand (EoD) 8 uses weak encryption for passwords, which makes it easier for (1) remote attackers to discover credentials by sniffing the network or (2) local users to discover credentials by reading a .eod8 file.CVE-2013-6807opentextexceed_ondemandEPSS score0.63%
The client in OpenText Exceed OnDemand (EoD) 8 supports anonymous ciphers by default, which allows man-in-the-middle attackers to bypass server certificate validation, redirect a connection, and obtain sensitive information via crafted responses.CVE-2013-6806opentextexceed_ondemandEPSS score1.03%
OpenText Exceed OnDemand (EoD) 8 allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensitive information via a crafted string in a response, which triggers a downgrade to simple authentication that sends credentials in plaintext.CVE-2013-3243opentextopentext\/ixos_ecm_for_sap_netweaverEPSS score1.26%
Unspecified vulnerability in OpenText/IXOS ECM for SAP NetWeaver allows remote attackers to execute arbitrary ABAP code via unknown vectors.CVE-2021-31512opentextbrava\!_desktopEPSS score1.81%
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.4.55. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TIF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-13677.CVE-2021-31490opentextbrava\!_desktopEPSS score1.42%
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DWF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-12718.CVE-2021-31501opentextbrava\!_desktopEPSS score1.10%
This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated data structure. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-13310.CVE-2021-31498opentextbrava\!_desktopEPSS score1.10%
This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DWF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated data structure. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-12744.CVE-2021-31511opentextbrava\!_desktopEPSS score1.81%
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.4.55. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-13676.CVE-2021-31481opentextbrava\!_desktopEPSS score1.42%
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SLDPRT files. The issue results from the lack of proper validation of a user-supplied value prior to dereferencing it as a pointer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-12659.CVE-2021-31510opentextbrava\!_desktopEPSS score1.81%
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.4.55. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TIF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-13675.CVE-2021-31482opentextbrava\!_desktopEPSS score1.42%
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DWF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-12708.CVE-2021-31497opentextbrava\!_desktopEPSS score1.42%
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of DWG files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-13311.CVE-2021-31480opentextbrava\!+1EPSS score1.42%
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-12654.CVE-2021-31503opentextbrava\!_desktopEPSS score1.38%
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.3.84 (package 16.6.3.134). User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of IGS files. The issue results from the lack of proper initialization of a pointer prior to accessing it. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-12690.